Republic of Korea: Personal Information Protection Commission investigation into Coupang over data leak of customer and account information
Progress
Scope
Timeline of events
Personal Information Protection Commission resumed collective dispute mediation proceedings against Coupang over data breach
On 12 June 2026, the Personal Information Protection Commission resumed and consolidated two collective dispute mediation proceedings against Coupang, following the Commission's resolution on 10 June 2026 to impose a penalty and other sanctions agai…
Personal Information Protection Commission fined Coupang KRW 624 billion over data breach caused due to inadequate access controls
On 10 June 2026, the Personal Information Protection Commission imposed a fine of KRW 624.681 billion against Coupang over a data breach. It was highlighted that the fine of KRW 423.575 billion relates to a large-scale personal data breach affecting…
Personal Information Protection Commission issued order requiring Coupang to cease publishing results of self conduct data breach investigation
On 14 January 2026, the Personal Information Protection Commission issued an order requiring Coupang to cease publishing the results of its self-conducted breach investigation on its application (app) and website. The Commission determined that Coup…
Personal Information Protection Commission required Coupang to implement corrective notification, public disclosure, and strengthened mitigation measures following investigation into data leak
On 3 December 2025, the Personal Information Protection Commission (PIPC) convened an emergency full Commission meeting and required Coupang to implement corrective notification, public disclosure, and strengthened mitigation measures following its …
Personal Information Protection Commission announced investigation into Coupang over data leak of customer and account information
On 30 November 2025, the Personal Information Protection Commission (PIPC) announced an investigation into Coupang, an e-commerce platform, over a data leak of customer and account information. The PIPC first received notice of data leaks on 20 Nove…